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DETAILED ACTION 

Claim Rejections - 35 USC §102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S. C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent granted 
on an application for patent by another filed in the United States before the invention by the applicant 
for patent, except that an international application filed under the treaty defined in section 351(a) shall 
have the effects for purposes of this subsection of an application filed in the United States only if the 
international application designated the United States and was published under Article 21(2) of such 
treaty in the English language. 

2. Claims 21, 22, 25, 26, 29, 30 and 32-39 are rejected under 35 U.S.C. 102(e) as 
being anticipated by Chen et al [2004/0233910 Al]. 

As to claim 21, Chen et al disclose a method to operate a storage area network 
(SAN) in a server environment in which multiple operating system images (see Fig., 2B, 
paragraph [0037], e.g., Solaris, Linux, NT) share one Fibre Channel adapter (see Fig., 2B, 
paragraph [0037]), the method comprising: 

managing the SAN by a SAN Management software with at least a SAN 
Management server (see Fig., 2B, item 240, paragraph [0037]) and at least a SAN 
Management client (see Fig., 2B, item 210, paragraph [0037]) with a communication path 
to said Fibre Channel Adapter (see Fig., 2B, item 170, paragraph [0037]); 

separating requests issued by the SAN Management server into at least two 
groups (see Fig. 5, 6), a first group is processed by the Fibre Channel adapter and the 
SAN on behalf of the SM Management client in place of operating system images which 
share the same Fibre Channel Adapter (see Fig. 5, paragraph [0059]), corresponding to a 
trusted path, and a second group is processed by the operating system images without the 
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need to send or receive requests to or from the Fibre Channel adapter and the SAN(see 
Fig. 6, paragraph [0060]) . 

As to claim 22, Chen et al further disclose that routing all information contained 
in unsolicited messages generated in the SAN and Fibre Channel adapter to the SAN 
Management server by the SAN management client (see paragraph [0055]). 

As to claim 25, Chen et al further disclose that accessing all information relevant 
for billing individual operating system images generated in the Fibre Channel adapter and 
SAN only through the SAN Management client on the trusted path (see paragraph 
[0055]). 

As to claim 26, Chen et al further disclose that SAN Management server 
providing authorization data to the SAN Management client to execute requests from said 
first group, and said SAN Management server and SAN Management client providing 
authorization data to the OS images to execute requests from said second group, and 
operating the OS images so that they are only enabled to execute a limited command set 
in the SAN (see Fig. 4, paragraph [0044]). 

As to claim 29, see similar rejection as to claim 21. 

As to claim 30, see similar rejection as to claim 22. 

As to claim 32, see similar rejection as to claim 25. 

As to claim 33, see similar rejection as to claim 25. 

As to claim 34, see similar rejection as to claim 26. 

As to claim 35, see similar rejection as to claim 26. 

As to claim 36, see similar rejection as to claim 26. 
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As to claim 37, Chen et al further disclose that the SAN Management server is 
equipped with a SAN Management Client and a Remote Access Server (RA Server), 
further comprising an operation of maintaining authorization data for accessing the RA 
Server in at least one of the SAN Management server and the SAN Management Client 
(see paragraph [0035]-[0039]). 

As to claim 38, Chen et al further disclose an operation of operating the SAN 
Management Client as a router for requests from the SAN Management server to the RA 
server (see paragraph [0035]-[0039]). 

As to claim 39, Chen et al further disclose that the RA Server comprises a 
telnet/sshd server (see paragraph [0035]-[0039]). 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

4. Claims 23 and 31 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Chen et al [2004/0233910 Al] in view of Rabe et al [7,194,538]. 

As to claim 23, Chen et al disclose all claim limitations mentioned above with 
respect to claim 21. 

Chen et al do not expressly disclose that using Host Bus Adapter Application 
Program Interface binding requests to modify a firewall, and operating the 
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communication path from the SAN Management client to the Fibre Channel adapter so 
that it cannot be modified or eavesdropped by an operating system image. 

Rabe et al disclose the above recited limitations (see Figs. 9, 10, col. 27, lines 46 
to col. 28, line 31). 

At the time of invention, it would have been obvious to a person of ordinary 
skilled in the art to incorporate the teaching of Rabe et al into Chen et al. The 
suggestion/motivation would have been to provide a secure storage from storage devices 
to hosts within the SAN as suggested by Rabe et al on col. 26, lines 57-59. 

As to claim 31, see similar rejection as to claim 23. 

Claim Rejections - 35 USC §102 

5. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or ;i foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

6. Claim 40-43 are rejected under 35 U.S.C. 102(b) as being anticipated by Iwatani 
[2001/0054093]. 

As to claim 40, Iwatani discloses a storage area network (SAN) Management 
server (see Fig. 3, item 500, paragraph [0052]), comprising: 

a first interface to couple to a SAN Management client that comprises a trusted 
operating system (OS), said SAN Management client being coupled to a SAN via a SAN 
adapter (see Fig. 5, items 102, 301, paragraphs [0052]-[0055]); and 
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a second interface to couple to at least one untrusted operating system, said at 
least one untrusted OS being coupled to the SAN via the SAN adapter and via a unit for 
regulating access to the SAN (see paragraph [0055]); 

where said SAN Management server comprises logic for distinguishing a first set 
of requests from a second set of requests, where the first set of requests are processed in 
cooperation only with said SAN Management client, and where the second set of requests 
are processed at least in part by the at least one untrusted operating system (see 
paragraphs [0060]-0066]). 

As to claim 41, Iwatani discloses that said first set of requests comprise at least 
one of a SAN request and a SAN adapter request (sec paragraphs [0060]-0062]), and said 
second set of requests comprise a request for untrusted OS configuration data (see 
paragraphs [0065]-0066]) . 

As to claim 42, Iwatani discloses a storage area network (SAN) Management 
client, comprising: 

a trusted operating system (OS) (see Fig. 3, items 120, 301, paragraphs [0053]- 
[0054]); 

a first interface to couple to a SAN via a SAN adapter (see Fig. 3, paragraph 
[0048]); and 

a second interface to couple to a SAN Management server and to at least one 
untrusted operating system coupled to the SAN via the SAN adapter and via a controller 
for regulating access to said SAN (see Fig. 3, paragraphs [0048], [0052], [0066]); 

said SAN Management client comprising logic for processing a first set of 
requests identified by the SAN Management server in cooperation only with said SAN 



Application/Control Number: 10/538,537 Page 7 

Art Unit: 4134 

Management server, where a second set of requests identified by the SAN Management 
server are processed at least in part by the at least one untrusted OS (see paragraphs 
[0060]-0066]); where said first set of requests comprise at least one of a SAN request and 
a SAN adapter request (see paragraphs [0060]-0062]), where said second set of requests 
comprise a request for untrusted OS configuration data (see paragraphs [0065]-0066]). 

As to claim 43, Iwatani discloses that the controller operates on top of said trusted 
operating system of said SAN Management client (see paragraphs [0048], [0052], 
[0060]-0062]). 

Conclusion 

7. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

Yamamoto [2003/0208589] and Padovano [2002/0156984] disclose various 
storage area networks (SAN). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to MINH-TRANG NGUYEN whose telephone number is 
(571)270-5248. The examiner can normally be reached on Monday to Friday 7:30AM to 
5:00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Lun-Yi Lao can be reached on 571-272-7671 . The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. Status 
information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a USPTO 
Customer Service Representative or access to the automated information system, call 
800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/MINH-TRANG NGUYEN/ 
Examiner, Art Unit 4134 

/M. N./ 

Examiner, Art Unit 4134 
/LUN-YI LAO/ 

Supervisory Patent Examiner, Art Unit 4134 
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